Skip to content
OpenAdvisories

Vendor

Arraytics

80 known vulnerabilities.

Products

Booktics 12 Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) 12 WP Event Solution 12 Timetics 10 Eventin 9 Eventin – Event Calendar, Tickets, Registration, Booking & WooCommerce 6 WPCafe – Restaurant Menu, Online Food Ordering & Table Booking System 6 WPCafe 5 Timetics – Appointment Booking & Scheduling 4 Booktics – Booking Calendar for Appointments and Service Businesses 2 Booktics – Appointment Booking Calendar for Service Businesses 1 Eventin – Events Calendar, Tickets, Registration, Booking & WooCommerce 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • High 7.5
    CVE-2026-40776 Public exploit

    WordPress Eventin plugin <= 4.1.8 - Broken Access Control vulnerability

    Unauthenticated Broken Access Control in WP Event SOlution <= 4.1.8 versions.

    Arraytics WP Event Solution
  • High 8.8
    CVE-2025-4796 Public exploit

    Eventin <= 4.0.34 - Authenticated (Contributor+) Privilege Escalation via User Email Change/Account Takeover

    The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like em…

    Arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) Web / CMS
  • Critical 9.8
    CVE-2025-47539 Public exploit EPSS 25%

    WordPress Eventin plugin <= 4.0.26 - Privilege Escalation Vulnerability

    Incorrect Privilege Assignment vulnerability in Arraytics Eventin wp-event-solution allows Privilege Escalation.This issue affects Eventin: from n/a through <= 4.0.26.

    Arraytics Eventin
  • High 7.5
    CVE-2025-47445 Public exploit

    WordPress Eventin plugin <= 4.0.26 - Arbitrary File Download Vulnerability

    Relative Path Traversal vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.26.

    Arraytics Eventin
  • High 7.5
    CVE-2025-3419 Public exploit

    Event Manager, Events Calendar, Tickets, Registrations – Eventin <= 4.0.26 - Unauthenticated Arbitrary File Read

    The Event Manager, Events Calendar, Tickets, Registrations – Eventin plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 4.0.26 via the proxy_image() function. This makes it possible for unauthenticated attackers to…

    Arraytics Eventin – Event Calendar, Event Registration, Tickets & Booking (AI Powered) Web / CMS